$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: CHSSP64lTZb4xyFQe+qkH590O4kskdLo+Vy9CjJHq44= Subject key identifier: 5B:B8:26:F2:24:2E:63:1E:77:98:FE:37:31:CF:5C:0F:B6:15:97:D9 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 01983616672C34BFF17A05242A0ED49CEE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0B7E Signing time: Wed 23 Jul 2025 07:01:34 +0000 Manifest this update: Wed 23 Jul 2025 07:01:34 +0000 Manifest next update: Thu 24 Jul 2025 07:01:34 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 12: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 13: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: I1OtdGQ/0a6w06VKh5ijXoc1RFO+2utYkhdro33EAr4=) 14: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 15: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 16: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 17: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:16:67:2c:34:bf:f1:7a:05:24:2a:0e:d4:9c:ee:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jul 23 07:01:34 2025 GMT Not After : Jul 24 07:01:34 2025 GMT Subject: CN=5bb826f2242e631e7798fe3731cf5c0fb61597d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:d8:58:ee:1b:3f:a0:e0:fa:75:39:cd:2d: 69:ca:bb:82:2b:c3:db:1d:ed:29:48:96:eb:96:5a: 1e:60:c7:b2:89:2e:4a:aa:c7:56:b8:c6:e6:82:6a: e6:d8:af:ba:42:b4:74:1e:65:12:8d:0d:89:4c:84: 0e:0c:94:69:8e:b9:5d:a5:14:53:fe:37:90:cc:e0: 9e:07:8c:29:39:a8:be:53:54:6f:5d:81:5d:ff:0a: 60:e2:b7:c2:46:78:82:60:67:56:6d:df:42:d5:2a: 62:e9:ba:79:26:e1:b3:83:54:75:20:96:3b:2e:af: 3f:bc:c8:78:71:4e:ed:bb:58:b1:a3:4b:05:eb:a4: a4:61:0e:02:24:97:b7:1a:3d:7b:21:3f:3b:d2:09: e1:79:44:13:d8:e8:41:3e:17:ce:97:fc:b7:02:31: f3:5c:db:fb:37:be:bb:da:27:57:a7:ed:67:2e:62: 2f:11:dd:e7:14:45:bc:54:b8:ed:80:fc:8c:f5:9d: 3e:50:ab:84:1a:78:b9:68:49:d4:f1:49:ce:86:77: 81:87:7b:1d:91:d5:42:4a:7d:f2:db:2e:7b:76:05: 0f:8d:dc:2a:ee:b7:c5:4b:e3:54:31:6f:18:20:31: 58:1f:f2:c0:41:8e:30:5f:2a:c3:a2:f7:f8:4c:28: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B8:26:F2:24:2E:63:1E:77:98:FE:37:31:CF:5C:0F:B6:15:97:D9 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:87:f9:78:3c:2f:40:14:55:53:4f:8c:d2:de:7f:e5:4b:ea: fd:0d:96:35:72:d1:2b:7b:54:47:32:86:80:11:1a:75:fc:7c: 97:4a:cc:4b:d6:34:62:d8:15:d4:03:55:c0:96:12:b1:2e:a4: ce:64:a5:23:c9:e2:31:9b:ba:31:8b:08:b7:52:96:ff:0d:16: c3:bc:e0:2a:b3:58:0e:1d:ef:cb:91:0a:f2:95:31:1f:f1:b6: 0e:1f:a2:58:76:ee:1b:54:49:9b:80:3c:32:1e:22:27:90:9c: 0a:f4:c8:7d:a3:d5:9b:60:07:07:6b:2d:d1:d3:32:0f:6e:fb: 46:f9:1f:d4:d9:bc:2d:d0:ea:69:c6:51:a9:f5:83:f4:bc:d1: e4:b3:26:de:34:3e:da:43:ed:76:80:8e:41:66:89:0d:67:a4: 60:1a:b0:64:c2:63:2e:2b:02:5d:be:38:6b:b8:40:fa:d1:fc: 26:23:1d:6b:b8:2d:93:38:c6:24:37:a6:ef:53:6b:a4:92:9a: 98:69:25:65:d7:42:c1:69:fd:b5:b0:2f:de:c3:fd:07:f4:dd: a8:3e:50:87:49:a4:ee:f4:57:9b:81:eb:b2:02:56:c7:6a:27: 14:38:6a:46:3f:68:ce:98:2a:d0:f2:20:29:c9:00:59:89:d0: d0:b4:eb:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2FmcsNL/xegUkKg7UnO4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNzIzMDcwMTM0WhcNMjUwNzI0MDcwMTM0WjAzMTEwLwYDVQQD Eyg1YmI4MjZmMjI0MmU2MzFlNzc5OGZlMzczMWNmNWMwZmI2MTU5N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGvYWO4bP6Dg+nU5zS1pyruCK8Pb He0pSJbrlloeYMeyiS5KqsdWuMbmgmrm2K+6QrR0HmUSjQ2JTIQODJRpjrldpRRT /jeQzOCeB4wpOai+U1RvXYFd/wpg4rfCRniCYGdWbd9C1Spi6bp5JuGzg1R1IJY7 Lq8/vMh4cU7tu1ixo0sF66SkYQ4CJJe3Gj17IT870gnheUQT2OhBPhfOl/y3AjHz XNv7N7672idXp+1nLmIvEd3nFEW8VLjtgPyM9Z0+UKuEGni5aEnU8UnOhneBh3sd kdVCSn3y2y57dgUPjdwq7rfFS+NUMW8YIDFYH/LAQY4wXyrDovf4TCjlmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu4JvIkLmMed5j+NzHPXA+2FZfZMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYf5eDwv QBRVU0+M0t5/5Uvq/Q2WNXLRK3tURzKGgBEadfx8l0rMS9Y0YtgV1ANVwJYSsS6k zmSlI8niMZu6MYsIt1KW/w0Ww7zgKrNYDh3vy5EK8pUxH/G2Dh+iWHbuG1RJm4A8 Mh4iJ5CcCvTIfaPVm2AHB2st0dMyD277Rvkf1Nm8LdDqacZRqfWD9LzR5LMm3jQ+ 2kPtdoCOQWaJDWekYBqwZMJjLisCXb44a7hA+tH8JiMda7gtkzjGJDem71NrpJKa mGklZddCwWn9tbAv3sP9B/TdqD5Qh0mk7vRXm4HrsgJWx2onFDhqRj9ozpgq0PIg KckAWYnQ0LTr8g== -----END CERTIFICATE-----Generated at Wed Jul 23 12:23:49 2025 by rpki-client